Add description of 2-legged auth